---
id: CVE-2026-86062
title: LightRAG provides simple and fast retrieval-augmented generation
summary: >-
  LightRAG provides simple and fast retrieval-augmented generation. Prior to
  1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer
  and thinking content with react-markdown, rehypeRaw, and skipHtml=false
  without an H…
severity: medium
cvss: 6.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'
cwe:
  - CWE-79
vendor: HKUDS
product: LightRAG
affected:
  - LightRAG < 1.5.5
published: '2026-09-22'
updated: '2026-09-22'
sourceUpdated: '2026-09-22T19:16:54.870'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86062'
references:
  - url: >-
      https://github.com/HKUDS/LightRAG/commit/8bf032a5200f293b482dd945d436e25cd08bd953
    label: security-advisories@github.com
  - url: 'https://github.com/HKUDS/LightRAG/pull/3437'
    label: security-advisories@github.com
  - url: 'https://github.com/HKUDS/LightRAG/releases/tag/v1.5.5'
    label: security-advisories@github.com
  - url: 'https://github.com/HKUDS/LightRAG/security/advisories/GHSA-xpjq-3w4w-w5wr'
    label: security-advisories@github.com
  - url: 'https://github.com/HKUDS/LightRAG/security/advisories/GHSA-xpjq-3w4w-w5wr'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86062'
  - url: 'https://github.com/advisories/GHSA-xpjq-3w4w-w5wr'
  - url: 'https://github.com/HKUDS/LightRAG'
tags:
  - nvd
  - cve.org
  - exploit-available
  - ghsa
  - pip
  - osv
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-22T18:14:49.454452Z'
ingestedAt: '2026-09-22T17:07:07.382Z'
aliases:
  - GHSA-xpjq-3w4w-w5wr
ecosystem: pip
patched:
  - lightrag-hku 1.5.5
epss: 0.00246
epssPercentile: 0.14152
---

## Overview

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An attacker who can add a document can store raw HTML that is returned through the query path and rendered as active content by MessageMarkdown. A user who later retrieves the content can execute attacker-controlled JavaScript through elements such as an iframe srcdoc; the additional Mermaid securityLevel: loose rendering path also injects generated SVG through innerHTML. The script runs in the LightRAG WebUI origin and can read the API token in localStorage and perform API actions as the victim. This issue is fixed in version 1.5.5.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-86062)

Affected packages:

- `lightrag-hku <= 1.5.4`

Patched in:

- `lightrag-hku 1.5.5`

Source: https://github.com/advisories/GHSA-xpjq-3w4w-w5wr